windows-development-sandbox 1.28.0 → 1.29.0

package/dist/host/launch/pc-logs.js

@@ -0,0 +1,129 @@
+// PC logs for developing the sandbox inside a sandbox: when a launch includes this very source repo, the PC's recent
+// crash reports and logs are copied into <launch>\pc-logs (C:\AgentLaunch\pc-logs, read-only, gone with the sandbox).
+// The gate is the repository url: a repo that only claims the package name does not pass. If one ever did, it would
+// see the owner's crash diagnostics (memory numbers, Windows events, process names), which hold no secrets.
+// Nothing else from <storage> is copied: no state files, logins, secrets or session ledger.
+import fs from 'node:fs';
+import path from 'node:path';
+import { z } from 'zod';
+import { assertNoLinks, ensureDir } from '../../core/util/index.js';
+const PACKAGE_NAME = 'windows-development-sandbox';
+const MAX_PACKAGE_JSON_BYTES = 256 * 1024;
+const MAX_REPORTS = 10;
+const MAX_REPORT_BYTES = 64 * 1024;
+const TAIL_BYTES = 256 * 1024;
+const PackageSchema = z.object({
+    name: z.string(),
+    repository: z.union([z.string(), z.object({ url: z.string().optional() }).passthrough()]).optional(),
+});
+function repoUrl(pkg) {
+    const url = typeof pkg.repository === 'string' ? pkg.repository : pkg.repository?.url;
+    if (!url)
+        return null;
+    return url
+        .trim()
+        .toLowerCase()
+        .replace(/^git\+/, '')
+        .replace(/\.git$/, '')
+        .replace(/\/+$/, '');
+}
+/** The package.json in a folder, read with a size cap and no links; null when missing, too big or not valid. */
+function readPackage(folder) {
+    try {
+        const file = path.join(folder, 'package.json');
+        assertNoLinks(folder, file);
+        const stat = fs.lstatSync(file);
+        if (!stat.isFile() || stat.size > MAX_PACKAGE_JSON_BYTES)
+            return null;
+        const parsed = PackageSchema.safeParse(JSON.parse(fs.readFileSync(file, 'utf8')));
+        return parsed.success ? parsed.data : null;
+    }
+    catch {
+        // No package.json, a link, or not JSON: not the sandbox's source.
+        return null;
+    }
+}
+/** Whether a folder is a checkout (or git worktree) of this sandbox's own source repo, judged by the installed copy. */
+export function isSandboxSourceRepo(folder, packageRoot) {
+    const own = readPackage(packageRoot);
+    const ownUrl = own ? repoUrl(own) : null;
+    if (!ownUrl)
+        return false;
+    const pkg = readPackage(folder);
+    return pkg !== null && pkg.name === PACKAGE_NAME && repoUrl(pkg) === ownUrl;
+}
+/** Plain file, no links on the way: its first `max` bytes (head) or last `max` bytes (tail); null when unreadable. */
+function readBounded(root, file, max, from) {
+    try {
+        assertNoLinks(root, file);
+        const stat = fs.lstatSync(file);
+        if (!stat.isFile())
+            return null;
+        const length = Math.min(stat.size, max);
+        const buffer = Buffer.alloc(length);
+        const fd = fs.openSync(file, 'r');
+        try {
+            fs.readSync(fd, buffer, 0, length, from === 'tail' ? stat.size - length : 0);
+        }
+        finally {
+            fs.closeSync(fd);
+        }
+        return buffer;
+    }
+    catch {
+        // Missing or unreadable: left out.
+        return null;
+    }
+}
+const README = [
+    'These files come from the PC that started this sandbox: its recent crash reports and logs, for developing the',
+    'sandbox itself. They are read-only here and gone when the sandbox closes.',
+    '',
+    'They are not part of the repo: never copy them into the workspace and never commit them.',
+    '',
+    'crashes\\   the newest crash reports (what Windows logged when a sandbox ended, plus the memory log)',
+    '*.log       the last 256 KB of the PC memory log, the host watcher log and the live-folders log',
+    '',
+].join('\r\n');
+/** Whether this launch has the sandbox's own source repo among its projects (the launch folder or a mapped project). */
+export function launchHasSandboxSource(folders, packageRoot) {
+    return folders.some((f) => isSandboxSourceRepo(f, packageRoot));
+}
+/** Copies the PC's recent crash reports and log tails into <launchPath>\pc-logs. Returns the folder. */
+export function stagePcLogs(storageRoot, dataPath, launchPath) {
+    const target = path.join(launchPath, 'pc-logs');
+    ensureDir(target);
+    fs.writeFileSync(path.join(target, 'README.txt'), README, 'utf8');
+    const crashes = path.join(storageRoot, 'logs', 'crashes');
+    let names = [];
+    try {
+        assertNoLinks(storageRoot, crashes);
+        names = fs
+            .readdirSync(crashes)
+            .filter((f) => /^crash-[\w.-]+\.txt$/.test(f))
+            .sort()
+            .slice(-MAX_REPORTS);
+    }
+    catch {
+        // No reports folder yet: none to copy.
+    }
+    for (const name of names) {
+        const text = readBounded(storageRoot, path.join(crashes, name), MAX_REPORT_BYTES, 'head');
+        if (!text)
+            continue;
+        ensureDir(path.join(target, 'crashes'));
+        fs.writeFileSync(path.join(target, 'crashes', name), text);
+    }
+    const data = path.basename(dataPath);
+    const tails = [
+        [path.join(storageRoot, 'logs', 'host-memory-' + data + '.log'), 'host-memory.log'],
+        [path.join(storageRoot, 'logs', 'host-sync-' + data + '.log'), 'host-sync.log'],
+        [path.join(storageRoot, 'state', 'live-folders.log'), 'live-folders.log'],
+    ];
+    for (const [source, name] of tails) {
+        const text = readBounded(storageRoot, source, TAIL_BYTES, 'tail');
+        if (text)
+            fs.writeFileSync(path.join(target, name), text);
+    }
+    return target;
+}

package/dist/host/sandbox/platform.js

@@ -63,7 +63,7 @@ export function assertCanLaunch(owner) {
             ? other + ' (Windows allows one per PC).'
             : 'A Windows Sandbox is already running (Windows allows one at a time).', other
             ? 'Use it with sandbox attach if it is shared with you, or start yours after it stops.'
-            : 'Attach to it with sandbox claude -t, show it with sbx-show, or shut it down with sandbox stop.');
+            : 'Attach to it with sandbox claude -t, show it with sandbox show, or shut it down with sandbox stop.');
     }
 }
 /** cmd.exe expands %VAR% and ^ even inside quotes, and a quote ends them: such a path could run something else. */

package/dist/host/sandbox/window.js

@@ -1,5 +1,5 @@
 // Headless mode: Windows Sandbox always opens its client window, so we hide it (ShowWindow SW_HIDE) as soon as it
-// appears. The VM and the logged-in session keep running; `sbx-show` brings the window back. The work is done by
+// appears. The VM and the logged-in session keep running; `sandbox show` brings the window back. The work is done by
 // HostTools.exe (native\csharp\HostTools\Window.cs), else by native\scripts\*-window.ps1 with the same C#.
 import path from 'node:path';
 import { spawn, spawnSync } from 'node:child_process';

package/dist/runtime/agent.js

@@ -25516,7 +25516,7 @@ var SandboxSchema = external_exports.strictObject({
   printerRedirection: external_exports.boolean().describe("Printers from this PC."),
   protectedClient: external_exports.boolean().describe("Run the sandbox window in Protected Client mode (recommended)."),
   headless: external_exports.boolean().describe(
-    "Hide the sandbox window (sbx-show brings it back). A headless sandbox shuts down when its last session ends."
+    'Hide the sandbox window ("Show the window" brings it back). A headless sandbox shuts down when its last session ends.'
   ),
   keepAwake: external_exports.boolean().describe(
     "Keep this PC from sleeping while a sandbox runs, so agents left working overnight keep going (the screen may still turn off; closing a laptop lid still sleeps it)."

package/dist/runtime/daemon.js

@@ -25535,7 +25535,7 @@ var SandboxSchema = external_exports.strictObject({
   printerRedirection: external_exports.boolean().describe("Printers from this PC."),
   protectedClient: external_exports.boolean().describe("Run the sandbox window in Protected Client mode (recommended)."),
   headless: external_exports.boolean().describe(
-    "Hide the sandbox window (sbx-show brings it back). A headless sandbox shuts down when its last session ends."
+    'Hide the sandbox window ("Show the window" brings it back). A headless sandbox shuts down when its last session ends.'
   ),
   keepAwake: external_exports.boolean().describe(
     "Keep this PC from sleeping while a sandbox runs, so agents left working overnight keep going (the screen may still turn off; closing a laptop lid still sleeps it)."
@@ -30040,6 +30040,10 @@ function toolLines(primaryName, toolSummary, projects) {
     "- Tools by project: each project gets the tools its own files ask for; python and rust already installed here are on every project's PATH."
   ];
 }
+function pcLogsGuideLine(launchDir2, exists2) {
+  const dir = path31.win32.join(launchDir2, "pc-logs");
+  return exists2(dir) ? ["- PC crash reports and logs (this project only, read-only, never commit them): `" + dir + "`"] : [];
+}
 
 // src/shared/unreal/engines.ts
 import crypto3 from "node:crypto";
@@ -31915,6 +31919,7 @@ function sandboxGuide(toolSummary, lan = "blocked", projects = [], addons = [])
     "- RW, persists: `" + stateDir + "` (agent config/history; do not edit logins) \xB7 logs: `" + path46.join(dataDir, "logs") + "`",
     "- RO: `" + launchDir + "` (this boot's scripts) \xB7 lost on close: everything else, incl. `C:\\nvm` (Node symlink)",
     ...mirrorLine(),
+    ...pcLogsGuideLine(launchDir, fs28.existsSync),
     ...toolLines(session.project, toolSummary, projects),
     ...unrealLines(projects),
     ...unityLines(projects),
@@ -32690,9 +32695,10 @@ function fileSha256(file3) {
     stream.on("end", () => resolve2(hash2.digest("hex")));
   });
 }
+var MISSING_PACKAGE = 'this PC did not hand over its package (it could not fetch it: see the launch notes). Fix: on this PC run "winget download --id <product id> --source msstore", then launch again';
 async function checkedPackage(dir) {
   const manifest2 = readValid(StorePackageManifestSchema, path55.join(dir, STORE_PACKAGE_MANIFEST));
-  if (!manifest2) throw new Error("the package was not handed over (this PC could not fetch it: see the launch notes)");
+  if (!manifest2) throw new Error(MISSING_PACKAGE);
   for (const f of manifest2.files) {
     if (await fileSha256(path55.join(dir, f.name)).catch(() => "") !== f.sha256)
       throw new Error(f.name + " is missing or changed");
@@ -33072,7 +33078,9 @@ var AppInstaller = class {
       warn(
         entry.name + " could not be installed and is skipped; the other apps are not affected. Reason: " + errMsg(e)
       );
-      this.env.summary.push(entry.name + ": FAILED");
+      this.env.summary.push(
+        "store" in entry.source ? entry.name + ": not installed - " + errMsg(e).slice(0, 300) : entry.name + ": FAILED"
+      );
     }
   }
   /** The command line an app's shortcut starts it with (Comet: its own profile, DevTools on 127.0.0.1). */
@@ -34957,82 +34965,6 @@ import fs58 from "node:fs";
 import os10 from "node:os";
 import path83 from "node:path";
 
-// src/shared/memory/policy.ts
-var DIAL_STEPS = {
-  normal: [
-    { availablePercent: 15, commitPercent: 80 },
-    { availablePercent: 10, commitPercent: 88 },
-    { availablePercent: 6, commitPercent: 94, secondsToLimit: 20 },
-    { availablePercent: 4, commitPercent: 97, secondsToLimit: 8 }
-  ],
-  gentle: [
-    { availablePercent: 20, commitPercent: 75 },
-    { availablePercent: 15, commitPercent: 85 },
-    { availablePercent: 8, commitPercent: 92, secondsToLimit: 25 },
-    { availablePercent: 5, commitPercent: 96, secondsToLimit: 10 }
-  ]
-};
-var DIAL_EXIT_MARGIN = { availablePercent: 5, commitPercent: 4 };
-var DIAL_CALM_SAMPLES = 3;
-var DIAL_CPU_RATE = [100, 100, 60, 35, 15];
-function compilersAllowed(step, running) {
-  if (step <= 1 || running <= 1) return running;
-  if (step === 2) return Math.max(1, Math.ceil(running * 0.6));
-  if (step === 3) return Math.max(1, Math.ceil(running / 3));
-  return 1;
-}
-function buildJobs(cpus, memoryGb) {
-  return Math.max(2, Math.min(cpus, Math.floor((memoryGb - 6) / 3)));
-}
-function linkSlotsFor(memoryGb) {
-  return Math.max(2, Math.min(8, Math.floor((memoryGb - 6) / 3)));
-}
-function usableCpus(cpus, percent) {
-  if (percent === null || percent >= 100) return cpus;
-  return Math.max(2, Math.min(cpus, Math.floor(cpus * percent / 100)));
-}
-function cargoJobs(cpus, memoryGb, sessions2) {
-  const byCpu = Math.max(2, Math.min(8, Math.floor(cpus / 4)));
-  const byMemory = Math.max(1, Math.floor(memoryGb / 4));
-  const jobs = Math.min(byCpu, byMemory);
-  return Math.max(1, Math.min(jobs, Math.floor(buildJobs(cpus, memoryGb) / Math.max(1, sessions2))));
-}
-var LOCAL_TARGET_MIN_BYTES = 25 * 1024 ** 3;
-function chooseTargetDir(targetDir, freeBytes2) {
-  if (targetDir !== "auto") return { targetDir };
-  if (freeBytes2 >= LOCAL_TARGET_MIN_BYTES) return { targetDir: "local" };
-  return {
-    targetDir: "separate",
-    warning: "Rust builds write through the mapped workspace; this can overload your PC's disk (C: has less than 25 GB free for a local build folder)"
-  };
-}
-function maxCompilers(cpus, profile) {
-  return profile === "gentle" ? Math.min(4, Math.max(2, Math.floor(cpus / 4))) : null;
-}
-function cargoLinkerVar(host) {
-  return "CARGO_TARGET_" + host.toUpperCase().replace(/[^A-Z0-9]/g, "_") + "_LINKER";
-}
-var BURST_GATE = {
-  normal: { growthMb: 4096, windowMs: 3e3, releaseMs: 1500, maxHoldMs: 3e4 },
-  gentle: { growthMb: 3072, windowMs: 3e3, releaseMs: 2e3, maxHoldMs: 3e4 }
-};
-
-// src/shared/memory/unreal-build.ts
-var NAMESPACE = "https://www.unrealengine.com/BuildConfiguration";
-function ubtBuildConfiguration(jobs) {
-  const max = Math.max(1, Math.floor(jobs));
-  return [
-    '<?xml version="1.0" encoding="utf-8"?>',
-    "<!-- Written by the sandbox at boot: compiles at once from the build budget (run\\budget.json, buildJobs). -->",
-    '<Configuration xmlns="' + NAMESPACE + '">',
-    "  <BuildConfiguration>",
-    "    <MaxParallelActions>" + max + "</MaxParallelActions>",
-    "  </BuildConfiguration>",
-    "</Configuration>",
-    ""
-  ].join("\r\n");
-}
-
 // src/guest/toolchains/native/debuggers.ts
 import path79 from "node:path";
 var SDK_SETUP_URL = "https://go.microsoft.com/fwlink/?linkid=2311806";
@@ -35810,14 +35742,6 @@ async function checkVisualStudio() {
     fs58.rmSync(dir, { recursive: true, force: true });
   }
 }
-function capUnrealBuilds() {
-  const cpus = usableCpus(os10.cpus().length, session.cpuLimitPercent ?? null);
-  const jobs = buildJobs(cpus, os10.totalmem() / 1024 ** 3);
-  const appData = process.env.APPDATA ?? "C:\\Users\\WDAGUtilityAccount\\AppData\\Roaming";
-  const dir = mkdirp(path83.join(appData, "Unreal Engine", "UnrealBuildTool"));
-  fs58.writeFileSync(path83.join(dir, "BuildConfiguration.xml"), ubtBuildConfiguration(jobs), "utf8");
-  return jobs;
-}
 async function part(what, work, fallback) {
   try {
     return await work();
@@ -35836,8 +35760,6 @@ async function setupUnreal(env, config2, _ctx) {
     return;
   }
   resetUnrealStatus();
-  const jobs = await part("capping parallel compiles", async () => capUnrealBuilds(), 0);
-  if (jobs) log("Unreal: UnrealBuildTool runs at most " + jobs + " compiles at once (the build budget)");
   await part("the DirectX End-User Runtime", installDirectX, void 0);
   const launcher = await part("the Epic Games Launcher", ensureLauncher, null);
   const place = placeEngines(config2.persistEngines);
@@ -35873,7 +35795,7 @@ async function setupUnreal(env, config2, _ctx) {
     debugger: debuggers ? path83.join(debuggers, "cdb.exe") : null
   }));
   env.summary.push(
-    "unreal tools: " + (vs ? "Visual Studio " + vs.version + (check2.ok ? " (UnrealBuildTool finds it)" : " (UnrealBuildTool would NOT find it)") : "no Visual Studio") + (jobs ? ", at most " + jobs + " compiles at once" : "") + ", DirectX End-User Runtime" + (launcher ? ", Epic Games Launcher" : "") + (debuggers ? ", cdb/windbg" : "")
+    "unreal tools: " + (vs ? "Visual Studio " + vs.version + (check2.ok ? " (UnrealBuildTool finds it)" : " (UnrealBuildTool would NOT find it)") : "no Visual Studio") + ", DirectX End-User Runtime" + (launcher ? ", Epic Games Launcher" : "") + (debuggers ? ", cdb/windbg" : "")
   );
 }
 
@@ -37720,6 +37642,66 @@ import fs72 from "node:fs";
 import os12 from "node:os";
 import path104 from "node:path";
 
+// src/shared/memory/policy.ts
+var DIAL_STEPS = {
+  normal: [
+    { availablePercent: 15, commitPercent: 80 },
+    { availablePercent: 10, commitPercent: 88 },
+    { availablePercent: 6, commitPercent: 94, secondsToLimit: 20 },
+    { availablePercent: 4, commitPercent: 97, secondsToLimit: 8 }
+  ],
+  gentle: [
+    { availablePercent: 20, commitPercent: 75 },
+    { availablePercent: 15, commitPercent: 85 },
+    { availablePercent: 8, commitPercent: 92, secondsToLimit: 25 },
+    { availablePercent: 5, commitPercent: 96, secondsToLimit: 10 }
+  ]
+};
+var DIAL_EXIT_MARGIN = { availablePercent: 5, commitPercent: 4 };
+var DIAL_CALM_SAMPLES = 3;
+var DIAL_CPU_RATE = [100, 100, 60, 35, 15];
+function compilersAllowed(step, running) {
+  if (step <= 1 || running <= 1) return running;
+  if (step === 2) return Math.max(1, Math.ceil(running * 0.6));
+  if (step === 3) return Math.max(1, Math.ceil(running / 3));
+  return 1;
+}
+function buildJobs(cpus, memoryGb) {
+  return Math.max(2, Math.min(cpus, Math.floor((memoryGb - 6) / 3)));
+}
+function linkSlotsFor(memoryGb) {
+  return Math.max(2, Math.min(8, Math.floor((memoryGb - 6) / 3)));
+}
+function usableCpus(cpus, percent) {
+  if (percent === null || percent >= 100) return cpus;
+  return Math.max(2, Math.min(cpus, Math.floor(cpus * percent / 100)));
+}
+function cargoJobs(cpus, memoryGb, sessions2) {
+  const byCpu = Math.max(2, Math.min(8, Math.floor(cpus / 4)));
+  const byMemory = Math.max(1, Math.floor(memoryGb / 4));
+  const jobs = Math.min(byCpu, byMemory);
+  return Math.max(1, Math.min(jobs, Math.floor(buildJobs(cpus, memoryGb) / Math.max(1, sessions2))));
+}
+var LOCAL_TARGET_MIN_BYTES = 25 * 1024 ** 3;
+function chooseTargetDir(targetDir, freeBytes2) {
+  if (targetDir !== "auto") return { targetDir };
+  if (freeBytes2 >= LOCAL_TARGET_MIN_BYTES) return { targetDir: "local" };
+  return {
+    targetDir: "separate",
+    warning: "Rust builds write through the mapped workspace; this can overload your PC's disk (C: has less than 25 GB free for a local build folder)"
+  };
+}
+function maxCompilers(cpus, profile) {
+  return profile === "gentle" ? Math.min(4, Math.max(2, Math.floor(cpus / 4))) : null;
+}
+function cargoLinkerVar(host) {
+  return "CARGO_TARGET_" + host.toUpperCase().replace(/[^A-Z0-9]/g, "_") + "_LINKER";
+}
+var BURST_GATE = {
+  normal: { growthMb: 4096, windowMs: 3e3, releaseMs: 1500, maxHoldMs: 3e4 },
+  gentle: { growthMb: 3072, windowMs: 3e3, releaseMs: 2e3, maxHoldMs: 3e4 }
+};
+
 // src/guest/governor/decide.ts
 var COMPILERS = /* @__PURE__ */ new Set([
   "rustc",

package/dist/runtime/db.js

@@ -25492,7 +25492,7 @@ var SandboxSchema = external_exports.strictObject({
   printerRedirection: external_exports.boolean().describe("Printers from this PC."),
   protectedClient: external_exports.boolean().describe("Run the sandbox window in Protected Client mode (recommended)."),
   headless: external_exports.boolean().describe(
-    "Hide the sandbox window (sbx-show brings it back). A headless sandbox shuts down when its last session ends."
+    'Hide the sandbox window ("Show the window" brings it back). A headless sandbox shuts down when its last session ends.'
   ),
   keepAwake: external_exports.boolean().describe(
     "Keep this PC from sleeping while a sandbox runs, so agents left working overnight keep going (the screen may still turn off; closing a laptop lid still sleeps it)."

package/dist/runtime/main.js

@@ -25508,7 +25508,7 @@ var SandboxSchema = external_exports.strictObject({
   printerRedirection: external_exports.boolean().describe("Printers from this PC."),
   protectedClient: external_exports.boolean().describe("Run the sandbox window in Protected Client mode (recommended)."),
   headless: external_exports.boolean().describe(
-    "Hide the sandbox window (sbx-show brings it back). A headless sandbox shuts down when its last session ends."
+    'Hide the sandbox window ("Show the window" brings it back). A headless sandbox shuts down when its last session ends.'
   ),
   keepAwake: external_exports.boolean().describe(
     "Keep this PC from sleeping while a sandbox runs, so agents left working overnight keep going (the screen may still turn off; closing a laptop lid still sleeps it)."
@@ -29168,6 +29168,10 @@ function toolLines(primaryName, toolSummary, projects) {
     "- Tools by project: each project gets the tools its own files ask for; python and rust already installed here are on every project's PATH."
   ];
 }
+function pcLogsGuideLine(launchDir2, exists2) {
+  const dir = path20.win32.join(launchDir2, "pc-logs");
+  return exists2(dir) ? ["- PC crash reports and logs (this project only, read-only, never commit them): `" + dir + "`"] : [];
+}
 
 // src/shared/unreal/engines.ts
 import crypto3 from "node:crypto";
@@ -31194,6 +31198,7 @@ function sandboxGuide(toolSummary, lan = "blocked", projects = [], addons = [])
     "- RW, persists: `" + stateDir + "` (agent config/history; do not edit logins) \xB7 logs: `" + path36.join(dataDir, "logs") + "`",
     "- RO: `" + launchDir + "` (this boot's scripts) \xB7 lost on close: everything else, incl. `C:\\nvm` (Node symlink)",
     ...mirrorLine(),
+    ...pcLogsGuideLine(launchDir, fs23.existsSync),
     ...toolLines(session.project, toolSummary, projects),
     ...unrealLines(projects),
     ...unityLines(projects),
@@ -31981,9 +31986,10 @@ function fileSha256(file3) {
     stream.on("end", () => resolve2(hash2.digest("hex")));
   });
 }
+var MISSING_PACKAGE = 'this PC did not hand over its package (it could not fetch it: see the launch notes). Fix: on this PC run "winget download --id <product id> --source msstore", then launch again';
 async function checkedPackage(dir) {
   const manifest2 = readValid(StorePackageManifestSchema, path45.join(dir, STORE_PACKAGE_MANIFEST));
-  if (!manifest2) throw new Error("the package was not handed over (this PC could not fetch it: see the launch notes)");
+  if (!manifest2) throw new Error(MISSING_PACKAGE);
   for (const f of manifest2.files) {
     if (await fileSha256(path45.join(dir, f.name)).catch(() => "") !== f.sha256)
       throw new Error(f.name + " is missing or changed");
@@ -32363,7 +32369,9 @@ var AppInstaller = class {
       warn(
         entry.name + " could not be installed and is skipped; the other apps are not affected. Reason: " + errMsg(e)
       );
-      this.env.summary.push(entry.name + ": FAILED");
+      this.env.summary.push(
+        "store" in entry.source ? entry.name + ": not installed - " + errMsg(e).slice(0, 300) : entry.name + ": FAILED"
+      );
     }
   }
   /** The command line an app's shortcut starts it with (Comet: its own profile, DevTools on 127.0.0.1). */
@@ -34243,49 +34251,6 @@ import fs52 from "node:fs";
 import os9 from "node:os";
 import path73 from "node:path";
 
-// src/shared/memory/policy.ts
-function buildJobs(cpus, memoryGb) {
-  return Math.max(2, Math.min(cpus, Math.floor((memoryGb - 6) / 3)));
-}
-function usableCpus(cpus, percent) {
-  if (percent === null || percent >= 100) return cpus;
-  return Math.max(2, Math.min(cpus, Math.floor(cpus * percent / 100)));
-}
-function cargoJobs(cpus, memoryGb, sessions) {
-  const byCpu = Math.max(2, Math.min(8, Math.floor(cpus / 4)));
-  const byMemory = Math.max(1, Math.floor(memoryGb / 4));
-  const jobs = Math.min(byCpu, byMemory);
-  return Math.max(1, Math.min(jobs, Math.floor(buildJobs(cpus, memoryGb) / Math.max(1, sessions))));
-}
-var LOCAL_TARGET_MIN_BYTES = 25 * 1024 ** 3;
-function chooseTargetDir(targetDir, freeBytes2) {
-  if (targetDir !== "auto") return { targetDir };
-  if (freeBytes2 >= LOCAL_TARGET_MIN_BYTES) return { targetDir: "local" };
-  return {
-    targetDir: "separate",
-    warning: "Rust builds write through the mapped workspace; this can overload your PC's disk (C: has less than 25 GB free for a local build folder)"
-  };
-}
-function cargoLinkerVar(host) {
-  return "CARGO_TARGET_" + host.toUpperCase().replace(/[^A-Z0-9]/g, "_") + "_LINKER";
-}
-
-// src/shared/memory/unreal-build.ts
-var NAMESPACE = "https://www.unrealengine.com/BuildConfiguration";
-function ubtBuildConfiguration(jobs) {
-  const max = Math.max(1, Math.floor(jobs));
-  return [
-    '<?xml version="1.0" encoding="utf-8"?>',
-    "<!-- Written by the sandbox at boot: compiles at once from the build budget (run\\budget.json, buildJobs). -->",
-    '<Configuration xmlns="' + NAMESPACE + '">',
-    "  <BuildConfiguration>",
-    "    <MaxParallelActions>" + max + "</MaxParallelActions>",
-    "  </BuildConfiguration>",
-    "</Configuration>",
-    ""
-  ].join("\r\n");
-}
-
 // src/guest/toolchains/native/debuggers.ts
 import path69 from "node:path";
 var SDK_SETUP_URL = "https://go.microsoft.com/fwlink/?linkid=2311806";
@@ -35015,14 +34980,6 @@ async function checkVisualStudio() {
     fs52.rmSync(dir, { recursive: true, force: true });
   }
 }
-function capUnrealBuilds() {
-  const cpus = usableCpus(os9.cpus().length, session.cpuLimitPercent ?? null);
-  const jobs = buildJobs(cpus, os9.totalmem() / 1024 ** 3);
-  const appData = process.env.APPDATA ?? "C:\\Users\\WDAGUtilityAccount\\AppData\\Roaming";
-  const dir = mkdirp(path73.join(appData, "Unreal Engine", "UnrealBuildTool"));
-  fs52.writeFileSync(path73.join(dir, "BuildConfiguration.xml"), ubtBuildConfiguration(jobs), "utf8");
-  return jobs;
-}
 async function part(what, work, fallback) {
   try {
     return await work();
@@ -35041,8 +34998,6 @@ async function setupUnreal(env, config3, _ctx) {
     return;
   }
   resetUnrealStatus();
-  const jobs = await part("capping parallel compiles", async () => capUnrealBuilds(), 0);
-  if (jobs) log("Unreal: UnrealBuildTool runs at most " + jobs + " compiles at once (the build budget)");
   await part("the DirectX End-User Runtime", installDirectX, void 0);
   const launcher = await part("the Epic Games Launcher", ensureLauncher, null);
   const place = placeEngines(config3.persistEngines);
@@ -35078,7 +35033,7 @@ async function setupUnreal(env, config3, _ctx) {
     debugger: debuggers ? path73.join(debuggers, "cdb.exe") : null
   }));
   env.summary.push(
-    "unreal tools: " + (vs ? "Visual Studio " + vs.version + (check2.ok ? " (UnrealBuildTool finds it)" : " (UnrealBuildTool would NOT find it)") : "no Visual Studio") + (jobs ? ", at most " + jobs + " compiles at once" : "") + ", DirectX End-User Runtime" + (launcher ? ", Epic Games Launcher" : "") + (debuggers ? ", cdb/windbg" : "")
+    "unreal tools: " + (vs ? "Visual Studio " + vs.version + (check2.ok ? " (UnrealBuildTool finds it)" : " (UnrealBuildTool would NOT find it)") : "no Visual Studio") + ", DirectX End-User Runtime" + (launcher ? ", Epic Games Launcher" : "") + (debuggers ? ", cdb/windbg" : "")
   );
 }
 
@@ -38405,6 +38360,29 @@ import fs67 from "node:fs";
 import os11 from "node:os";
 import path94 from "node:path";
 
+// src/shared/memory/policy.ts
+function buildJobs(cpus, memoryGb) {
+  return Math.max(2, Math.min(cpus, Math.floor((memoryGb - 6) / 3)));
+}
+function cargoJobs(cpus, memoryGb, sessions) {
+  const byCpu = Math.max(2, Math.min(8, Math.floor(cpus / 4)));
+  const byMemory = Math.max(1, Math.floor(memoryGb / 4));
+  const jobs = Math.min(byCpu, byMemory);
+  return Math.max(1, Math.min(jobs, Math.floor(buildJobs(cpus, memoryGb) / Math.max(1, sessions))));
+}
+var LOCAL_TARGET_MIN_BYTES = 25 * 1024 ** 3;
+function chooseTargetDir(targetDir, freeBytes2) {
+  if (targetDir !== "auto") return { targetDir };
+  if (freeBytes2 >= LOCAL_TARGET_MIN_BYTES) return { targetDir: "local" };
+  return {
+    targetDir: "separate",
+    warning: "Rust builds write through the mapped workspace; this can overload your PC's disk (C: has less than 25 GB free for a local build folder)"
+  };
+}
+function cargoLinkerVar(host) {
+  return "CARGO_TARGET_" + host.toUpperCase().replace(/[^A-Z0-9]/g, "_") + "_LINKER";
+}
+
 // src/guest/governor/decide.ts
 var COMPILERS = /* @__PURE__ */ new Set([
   "rustc",

package/dist/runtime/netproxy.js

@@ -25544,7 +25544,7 @@ var SandboxSchema = external_exports.strictObject({
   printerRedirection: external_exports.boolean().describe("Printers from this PC."),
   protectedClient: external_exports.boolean().describe("Run the sandbox window in Protected Client mode (recommended)."),
   headless: external_exports.boolean().describe(
-    "Hide the sandbox window (sbx-show brings it back). A headless sandbox shuts down when its last session ends."
+    'Hide the sandbox window ("Show the window" brings it back). A headless sandbox shuts down when its last session ends.'
   ),
   keepAwake: external_exports.boolean().describe(
     "Keep this PC from sleeping while a sandbox runs, so agents left working overnight keep going (the screen may still turn off; closing a laptop lid still sleeps it)."

package/dist/runtime/tool.js

@@ -25930,7 +25930,7 @@ var SandboxSchema = external_exports.strictObject({
   printerRedirection: external_exports.boolean().describe("Printers from this PC."),
   protectedClient: external_exports.boolean().describe("Run the sandbox window in Protected Client mode (recommended)."),
   headless: external_exports.boolean().describe(
-    "Hide the sandbox window (sbx-show brings it back). A headless sandbox shuts down when its last session ends."
+    'Hide the sandbox window ("Show the window" brings it back). A headless sandbox shuts down when its last session ends.'
   ),
   keepAwake: external_exports.boolean().describe(
     "Keep this PC from sleeping while a sandbox runs, so agents left working overnight keep going (the screen may still turn off; closing a laptop lid still sleeps it)."

package/dist/runtime/view.js

@@ -26214,7 +26214,7 @@ var SandboxSchema = external_exports.strictObject({
   printerRedirection: external_exports.boolean().describe("Printers from this PC."),
   protectedClient: external_exports.boolean().describe("Run the sandbox window in Protected Client mode (recommended)."),
   headless: external_exports.boolean().describe(
-    "Hide the sandbox window (sbx-show brings it back). A headless sandbox shuts down when its last session ends."
+    'Hide the sandbox window ("Show the window" brings it back). A headless sandbox shuts down when its last session ends.'
   ),
   keepAwake: external_exports.boolean().describe(
     "Keep this PC from sleeping while a sandbox runs, so agents left working overnight keep going (the screen may still turn off; closing a laptop lid still sleeps it)."

package/dist/selftest/cli.test.js

@@ -47,17 +47,17 @@ export const cliSuite = {
             ['postgres', 'redis', 'mongodb'],
             ['--continue'],
         ], '`start` is launch without an agent; positionals, repeated lists and arguments after -- parse');
-        t.section('parser: agent wrappers (claude-sbx ...) and agent-sandbox');
+        t.section('parser: agent mode (sandbox claude ...) and plain commands');
         const wrapped = parseCli(['--terminal', '--continue', '--headless', '--node', '20', '--', '--terminal'], true);
-        t.equal([wrapped.command, wrapped.terminal, wrapped.headless, wrapped.node, wrapped.passthrough], ['launch', true, true, '20', ['--continue', '--terminal']], 'claude-sbx: sandbox flags are consumed, everything else goes to the agent');
-        await t.throws(() => parseCli(['status', '--bogus']), 'unknown option', 'agent-sandbox: unknown options are errors');
+        t.equal([wrapped.command, wrapped.terminal, wrapped.headless, wrapped.node, wrapped.passthrough], ['launch', true, true, '20', ['--continue', '--terminal']], 'agent mode: sandbox flags are consumed, everything else goes to the agent');
+        await t.throws(() => parseCli(['status', '--bogus']), 'unknown option', 'plain commands: unknown options are errors');
         const agentFlags = parseCli(['--model', 'opus', '-p', 'fix it', '--json', '-f', 'x', '--timeout', '5', '--resume', 'abc'], true);
         t.check(agentFlags.passthrough.join('|') === '--model|opus|-p|fix it|--json|-f|x|--timeout|5|--resume|abc' &&
             !agentFlags.json &&
             !agentFlags.follow &&
-            agentFlags.timeout === 600, 'claude-sbx: any flag that is not a launch option goes to the agent in order and sets no agent-sandbox option');
+            agentFlags.timeout === 600, 'agent mode: any flag that is not a launch option goes to the agent in order and sets no sandbox option');
         const reserved = parseCli(['--sbx-terminal', '--terminal', '--sbx-node=18'], true);
-        t.equal([reserved.terminal, reserved.node, reserved.passthrough], [true, '18', []], '--sbx-<option> always means agent-sandbox');
+        t.equal([reserved.terminal, reserved.node, reserved.passthrough], [true, '18', []], '--sbx-<option> always means the sandbox option');
         await t.throws(() => parseCli(['--sbx-nope'], true), 'Unknown option: --sbx-nope', 'an unknown --sbx-<option> is an error');
         t.section('menu helpers');
         t.check(splitArgs('--model "big one" -c \'x y\'').join('|') === '--model|big one|-c|x y' &&

package/dist/selftest/config.test.js

@@ -75,7 +75,7 @@ export const configSuite = {
         });
         const sharedFile = t.at('share', 'theirs.json');
         fs.writeFileSync(sharedFile, shared);
-        const bin = (args) => f.runBin('agent-sandbox', [...args, '--config', yours], { cwd: f.workA, env });
+        const bin = (args) => f.runBin('sandbox', [...args, '--config', yours], { cwd: f.workA, env });
         const outFile = t.at('share', 'out.json');
         const exportRun = await bin(['config', 'export', outFile]);
         const written = readJsonc(outFile);

package/dist/selftest/credentials.test.js

@@ -191,7 +191,7 @@ export const credentialsSuite = {
             ['vpn', 'status', '--json'],
             ['status', '--json'],
         ]) {
-            const out = await f.runBin('agent-sandbox', [...args, '--config', cliConfig], { cwd: f.workA, env });
+            const out = await f.runBin('sandbox', [...args, '--config', cliConfig], { cwd: f.workA, env });
             t.check(!out.out.includes(API_KEY) && (args[0] !== 'config' || out.out.includes('***')), 'sandbox ' + args.join(' ') + ' never prints the planted key' + (args[0] === 'config' ? ' (it shows ***)' : ''), out.out.slice(0, 400));
         }
     },

package/dist/selftest/engine.test.js

@@ -117,7 +117,7 @@ export const engineSuite = {
             !LocalOverridesSchema.safeParse({ storage: { containedMaxGb: 8 } }).success, "a project's .sandbox-config.json cannot set sandbox.engine, storage.contained or storage.containedMaxGb");
         t.check(LocalOverridesSchema.safeParse({ sandbox: { vGpu: false } }).success, 'other sandbox settings are still allowed in a project file');
         t.section('sandbox engine');
-        const run = await f.runBin('agent-sandbox', ['engine', '--json', '--config', t.writeJson(t.at('engine-config.json'), {})], {
+        const run = await f.runBin('sandbox', ['engine', '--json', '--config', t.writeJson(t.at('engine-config.json'), {})], {
             cwd: f.workA,
             env: { ...process.env, NO_COLOR: '1', AGENT_SANDBOX_HOME: t.dir('engine-home'), AGENT_SANDBOX_HOST_ONLY: '1' },
         });